OpenSSL Vulnerabilities: CMS AuthEnvelopedData parsing stack overflow and related CVEs (2025-2026)
Summary
The OpenSSL vulnerabilities page aggregates 2025–2026 CVEs affecting CMS/PKCS7 parsing and related components, highlighting a stack buffer overflow in CMS AuthEnvelopedData parsing (CVE-2025-15467) and several other issues with varying severity. It provides affected versions, references to advisories, and notes on mitigations such as patching and configuration changes.